Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/YaNSkilLvxLgKPrT-xDRiMn7jX4.roa
File: YaNSkilLvxLgKPrT-xDRiMn7jX4.roa (raw, json)
Hash identifier: EZ2qfgMp+bvQiHoGlwVv0eQJIbOoTlAjmgUR8kwZiCU=
Subject key identifier: 61:A3:52:92:29:4B:BF:12:E0:28:FA:D3:FB:10:D1:88:C9:FB:8D:7E
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 0198DAE2C3E12BE1D52441815DB791E6DF1B
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/YaNSkilLvxLgKPrT-xDRiMn7jX4.roa
Signing time: Sun 24 Aug 2025 07:02:31 +0000
ROA not before: Sun 24 Aug 2025 07:02:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214922
IP address blocks: 87.236.208.0/24 maxlen: 24
2a03:9381:a::/48 maxlen: 48
2a03:9381:b::/48 maxlen: 48
2a03:9381:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:da:e2:c3:e1:2b:e1:d5:24:41:81:5d:b7:91:e6:df:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Aug 24 07:02:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61a35292294bbf12e028fad3fb10d188c9fb8d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:07:73:e9:30:70:1e:bf:79:5f:07:c2:4f:
9f:3b:5d:65:b0:f6:9d:2a:22:1b:51:99:6e:57:ec:
11:8a:d1:23:aa:b6:40:7f:0b:59:68:b4:90:f3:78:
52:d6:65:d6:67:9a:4b:96:09:59:70:da:29:bc:ac:
7c:0c:5a:31:f1:21:0e:51:be:1e:74:36:37:02:fb:
1a:5d:53:f7:b2:d7:f4:fb:ec:3b:cd:b2:11:73:c6:
9b:f0:81:8b:26:23:f8:ce:3a:72:8d:0c:33:f5:73:
b6:a3:07:d8:6d:44:c9:0f:ad:e6:a0:ed:13:b2:93:
4d:71:e7:8a:5a:5a:be:82:34:1d:2a:72:6f:01:c3:
09:fa:4e:64:49:ec:3a:f3:b4:6e:1c:ff:7f:74:a8:
9b:86:c9:30:5a:94:f9:ef:2f:45:14:60:8c:20:0a:
f5:46:15:12:41:14:04:f6:88:f5:68:9a:4b:d8:45:
1c:b9:e5:56:8a:d3:6c:03:a1:90:d2:cd:d6:11:fd:
30:60:91:4c:3b:d4:c3:c2:f0:36:cd:53:92:3c:3a:
14:64:fe:60:86:06:35:db:0e:40:2c:13:40:c6:2c:
f3:2e:03:47:d9:16:bb:8d:f6:b4:b9:09:90:f6:94:
c2:f0:fd:14:67:52:8c:ea:0c:ac:f1:5a:58:99:24:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:52:92:29:4B:BF:12:E0:28:FA:D3:FB:10:D1:88:C9:FB:8D:7E
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/YaNSkilLvxLgKPrT-xDRiMn7jX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.208.0/24
IPv6:
2a03:9381:a::-2a03:9381:c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
00:fe:63:ed:d8:4b:7c:87:cf:a3:45:0b:e1:5b:a1:de:73:07:
a9:84:e0:58:09:59:16:c5:2a:dc:a0:08:1e:58:5e:70:cd:f9:
3f:31:6d:c4:3f:90:11:c8:6c:35:74:34:c8:98:8a:33:e7:8b:
7b:ed:85:cd:7b:0d:51:dc:d5:84:77:58:df:8e:1a:fc:96:b1:
44:6f:0c:6a:f9:10:06:59:15:26:13:9f:07:af:97:16:25:f7:
c1:cb:13:14:63:1d:b9:a0:0b:d8:89:9c:21:8b:06:c9:b2:7c:
24:41:bf:a2:11:94:2f:ff:28:5a:1d:a5:25:c5:2b:a0:33:61:
0a:9d:37:69:ed:1e:1a:64:ee:b2:7c:43:4e:2d:ae:8f:29:88:
df:01:cf:e4:b2:a0:d0:4a:d3:28:d7:99:b8:ee:28:ea:0e:8a:
24:13:c2:ac:2f:4e:d8:21:e9:62:a6:6b:f5:08:a8:3d:5d:c3:
8e:f5:90:82:2c:5e:cd:e1:c7:93:94:5f:30:30:04:64:08:73:
71:a5:fe:5b:59:79:54:de:94:15:54:52:60:75:f9:2a:98:46:
ef:17:a6:b8:ab:c8:b0:6e:ee:6c:c5:c6:03:1b:28:0d:a5:3a:
f1:dd:04:74:8e:af:7b:f3:0d:9a:61:10:2d:b7:8a:11:58:f9:
35:c3:72:b3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZja4sPhK+HVJEGBXbeR5t8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjUwODI0MDcwMjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWEzNTI5MjI5NGJiZjEyZTAyOGZhZDNmYjEwZDE4OGM5ZmI4ZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBoHc+kwcB6/eV8Hwk+fO11lsPad
KiIbUZluV+wRitEjqrZAfwtZaLSQ83hS1mXWZ5pLlglZcNopvKx8DFox8SEOUb4e
dDY3AvsaXVP3stf0++w7zbIRc8ab8IGLJiP4zjpyjQwz9XO2owfYbUTJD63moO0T
spNNceeKWlq+gjQdKnJvAcMJ+k5kSew687RuHP9/dKibhskwWpT57y9FFGCMIAr1
RhUSQRQE9oj1aJpL2EUcueVWitNsA6GQ0s3WEf0wYJFMO9TDwvA2zVOSPDoUZP5g
hgY12w5ALBNAxizzLgNH2Ra7jfa0uQmQ9pTC8P0UZ1KM6gys8VpYmSQLnwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGGjUpIpS78S4Cj60/sQ0YjJ+41+MB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEvWWFOU2tpbEx2eExnS1ByVC14RFJpTW43alg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAV+zQMBoE
AgACMBQwEgMHASoDk4EACgMHACoDk4EADDANBgkqhkiG9w0BAQsFAAOCAQEAAP5j
7dhLfIfPo0UL4Vuh3nMHqYTgWAlZFsUq3KAIHlhecM35PzFtxD+QEchsNXQ0yJiK
M+eLe+2FzXsNUdzVhHdY344a/JaxRG8MavkQBlkVJhOfB6+XFiX3wcsTFGMduaAL
2ImcIYsGybJ8JEG/ohGUL/8oWh2lJcUroDNhCp03ae0eGmTusnxDTi2ujymI3wHP
5LKg0ErTKNeZuO4o6g6KJBPCrC9O2CHpYqZr9QioPV3DjvWQgixezeHHk5RfMDAE
ZAhzcaX+W1l5VN6UFVRSYHX5KphG7xemuKvIsG7ubMXGAxsoDaU68d0EdI6ve/MN
mmEQLbeKEVj5NcNysw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 00:51:22 2025 by rpki-client